In order to alleviate the malicious effects, some existing papers use majority voting and median-based defenses [1]}, [2]}, [3]}, [4]}, [5]}, [6]}. Other works replicate the gradient tasks across the cluster [7]}, [8]}, [9]}, [10]}, [11]}. Finally, some schemes try to rank and/or detect the Byzantines [9]}, [13]}, [14]}.
